Consultancy service to obtain ENS compliance certification

Summary

The tender concerns consultancy to bring the information systems and technological solutions hosted in BILBAOTIK S.A.'s municipal infrastructure into conformity with the Spanish National Security Framework (ENS) and support certification. The scope covers Bilbao City Council and five affiliated municipal entities: Bilbao Musika, Bilbao Zerbitzuak, Centro Azkuna, Funicular de Artxanda and C.A.C. Teatro Arriaga. The contractor must prepare the ENS adaptation plan, conduct risk and gap analyses, support implementation, develop an NIS2 convergence plan, carry out ethical hacking exercises, provide security awareness training, perform an internal audit and accompany the external certification audit. The project is planned for a maximum of two years, with certification expected by the seventh and eighth quarters. The tender deadline is 28 September 2026.